Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft
File:                     9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft (raw, json)
Hash identifier:          1jDKtTpdJxvRV4AOwLVrsBMDFJE0GDXcktB3WR7o9eU=
Subject key identifier:   D4:86:A1:04:78:49:4F:FA:C1:EE:EB:0E:B9:55:97:1C:CB:43:A5:34
Authority key identifier: F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
Certificate issuer:       /CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Certificate serial:       019FCAEF94796BD90272CDE2D26847FAE5EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft
Manifest number:          1A1B
Signing time:             Tue 04 Aug 2026 04:02:06 +0000
Manifest this update:     Tue 04 Aug 2026 04:02:06 +0000
Manifest next update:     Wed 05 Aug 2026 04:02:06 +0000
Files and hashes:         1: 4rHkukJZlmv4as-4xMu4r_3jmNE.roa (hash: +bpTdQ8MOcqEZXfHNxSdTdJOkYSVdHAINcyN0oTieLw=)
                          2: 9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl (hash: wwK9wV48+H/it68W+DmjDvSSV9NkxtE61MHvYXhbGNs=)
                          3: Ecc1uLkv62Npv2ZtykPIlz8fvJ4.roa (hash: PlWjmtPxw4OkvYH5bNtiXs3BOmA0kF3dQLpadBG2s+E=)
                          4: GaY0PBVBeo4KpiNFKZ9BeK4puOg.roa (hash: kSV2htK/TB9FGgHOzLvBWeHTLFTLf67Ynu1IuSCMkQQ=)
                          5: cjcmiOtDDlTjyYQyKCJamvURnkg.roa (hash: kI1yDYXFOnMe/2BdFboj81gzmTgi8ptrjeCtHHILCuc=)
                          6: l2FIOzPFvXObRwUNiGKUwkx8yng.roa (hash: U27wT6U0NEvNHvjZg6ZUfLZqVxl9USYItoeoVAzNuao=)
                          7: wdNyk0cj7ZXHBOyRtNKSRHIMVM4.roa (hash: oARchr96uMH1VEdClz/RFIsJnl10GfEYjwsXH9UCt0s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Aug 2026 04:02:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ca:ef:94:79:6b:d9:02:72:cd:e2:d2:68:47:fa:e5:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
        Validity
            Not Before: Aug  4 04:02:06 2026 GMT
            Not After : Aug  5 04:02:06 2026 GMT
        Subject: CN=d486a10478494ffac1eeeb0eb955971ccb43a534
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:71:54:f0:3a:6c:4e:76:b0:c8:e2:dc:f9:d8:
                    4d:57:ac:3c:17:04:59:3d:80:9a:07:1d:17:3c:86:
                    3b:40:83:73:8c:26:a4:10:18:8f:23:2b:00:e7:01:
                    1c:c8:55:63:75:72:ef:2e:62:78:83:f2:ff:a9:e0:
                    8c:66:d5:55:56:d1:61:b6:34:c1:f3:42:d4:1f:a9:
                    88:11:b2:24:c1:60:f2:ca:51:cf:c8:13:d5:91:59:
                    23:b1:db:53:63:98:23:bd:cb:a8:16:34:ee:35:e5:
                    6b:33:19:d2:66:1f:0b:e1:8e:a9:b2:f9:13:4d:37:
                    ea:d2:c8:56:4f:8e:77:33:a8:5a:6d:48:27:dd:e2:
                    2c:20:dd:e1:80:02:58:60:79:9b:67:cb:5a:96:e4:
                    83:06:d7:4c:67:e8:75:4f:83:01:4d:ac:c4:ac:59:
                    c1:ad:d7:bb:80:a5:85:d8:6c:e5:90:ed:ca:a8:b4:
                    73:6e:2e:ec:03:ef:c4:3e:17:b2:f4:82:67:f8:91:
                    50:b4:c9:5e:da:0d:06:9f:68:fb:88:a3:4c:d7:43:
                    c6:b3:41:22:be:93:dc:ba:86:a1:9d:3e:94:a0:25:
                    6b:5d:fe:61:da:b5:50:8b:7e:73:8a:7b:4e:3c:fa:
                    6b:eb:77:ec:ff:df:10:7a:9c:d2:99:72:d8:46:59:
                    15:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:86:A1:04:78:49:4F:FA:C1:EE:EB:0E:B9:55:97:1C:CB:43:A5:34
            X509v3 Authority Key Identifier:
                keyid:F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:ee:58:c3:d3:31:d7:b2:d8:30:57:ac:90:b1:21:aa:61:b2:
         a7:b6:f8:fd:38:ed:48:3f:17:00:e5:78:fb:f4:91:8f:c1:97:
         3d:26:51:b8:6b:86:bb:2d:a1:f8:dd:08:93:04:7c:8f:12:c8:
         9f:81:f3:c9:4d:85:2f:23:0d:a6:a2:d7:a0:3a:68:00:41:af:
         60:31:ed:bf:1b:42:71:bd:9b:bb:a7:0c:44:78:ad:2b:3e:f2:
         54:51:b9:93:df:03:4e:ed:e6:d2:bc:0e:c4:d3:02:00:f4:dd:
         7a:05:6f:42:2b:8f:91:8c:3b:54:3c:77:62:e3:53:5a:c5:fa:
         63:05:a5:c8:a4:9c:62:2d:96:0d:f3:8a:c1:d4:e5:c6:0a:0e:
         59:e0:e9:8a:d4:b0:6e:80:c1:1b:0d:35:6b:2a:ab:df:74:23:
         85:69:af:b8:88:b5:a7:a1:64:38:76:de:70:53:0c:e8:e4:d8:
         90:dd:72:fc:9f:2c:e5:44:ff:c5:05:40:c4:97:3f:b4:87:b1:
         32:a5:8a:58:aa:94:20:b7:61:47:81:82:43:d6:9d:00:37:bb:
         4e:5d:5a:58:df:cb:d7:ee:a3:f8:e0:e3:43:7f:6e:49:1f:32:
         18:f3:24:13:3e:97:23:0b:1e:c3:9e:11:66:99:bd:44:dc:f6:
         b1:2c:a7:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 13:39:43 2026 by rpki-client